imKey Official Store Privacy Policy

1. Introduction

Welcome to the imKey Official Store (the "Store" or "Website"), accessible at https://www.imkey.im. The Store is operated by IMKEY PTE. LTD. ("imKey", "we", "us", or "our") and is powered by the platform provided by Shopify, Inc. ("Shopify").

Your privacy is of paramount importance to us. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you visit the Store, register an account (if applicable), purchase products, or otherwise interact with us.

This Policy is governed by and shall be construed in accordance with the laws of Singapore, particularly the Personal Data Protection Act (PDPA).

Please read this Privacy Policy carefully before using the Website or providing any personal information. By accessing the Website or purchasing products, you acknowledge and agree to the practices described herein. This Policy constitutes an integral part of the imKey Official Store Terms and Conditions of Sale.

2. Personal Information We Collect

We may collect the following categories of personal information:

• Identity Information: Full name, email address, phone number, billing address, and shipping address.
• Order and Transaction Information: Details of products purchased, order history, and payment information.
  • Note on Payment: We do not directly store your full credit card numbers or other sensitive payment data. All payment transactions are transmitted via SSL encryption and processed by payment service providers compliant with PCI DSS (Payment Card Industry Data Security Standard). This information is handled by our trusted third-party payment gateways, including but not limited to Shopify Payments, https://www.google.com/url?sa=E&source=gmail&q=Checkout.com, and PayPal, according to their respective security standards.
• Account Information (if you choose to create an account): Username, account preferences, and password.
  • Note on Passwords: We utilize the secure technical architecture provided by the Shopify platform to store your password using industry-standard irreversible hashing algorithms. As the platform provider, Shopify is responsible for the underlying infrastructure security and encryption of such sensitive data; imKey cannot access or retrieve your plaintext password.
• Technical and Usage Information: IP address, browser type and version, operating system, device type, date and time of visit, pages viewed, duration of stay, clickstream data, referral URLs, and data collected via Cookies and similar tracking technologies.
• Communication Information: Records of correspondence when you contact us via email, support forms, or other channels.
• Marketing and Preference Information: Your preferences regarding marketing communications and responses to surveys or promotions.

3. How We Collect Information

We collect information through the following methods:

• Direct Collection: Provided by you when placing an order, creating an account, subscribing to newsletters, or contacting customer support.
• Automated Collection: Collected automatically via Cookies, pixel tags, web beacons, and similar technologies as you navigate the Store.
• Third-Party Sources: Information received from Shopify, payment processors (transaction status only), analytics providers (e.g., Google Analytics), and social media platforms (depending on your privacy settings).

4. Why and How We Use Your Information (Legal Bases)

We process your personal information based on the following legal grounds:

• Performance of a Contract: To process orders, handle payments, arrange shipping, and provide after-sales service.
• Legitimate Interests: To operate and improve our services, personalize user experience, conduct data analysis, prevent and detect fraud or security incidents, and manage business operations.
• Consent: To send marketing emails or use non-essential Cookies (which you may withdraw at any time).
• Legal Obligation: To comply with applicable laws, tax requirements, or valid legal processes.

5. Information Sharing and Disclosure

We do not sell your personal information. We only share your data with:

• Shopify: As our e-commerce platform provider.
• Service Providers: Trusted third parties assisting our operations, including Payment Processors (e.g., https://www.google.com/url?sa=E&source=gmail&q=Checkout.com, PayPal), logistics companies (e.g., DHL, FedEx, SF Express), and marketing or analytics tools (e.g., Mailchimp, Google Analytics).
• Legal and Law Enforcement: When required by law or to protect our rights and safety.
• Business Transfers: In the event of a merger, acquisition, or asset sale.

6. Cookies and Tracking Technologies

We use Cookies to ensure website functionality, enhance user experience, and perform site analytics. You can manage Cookie settings through your browser. For jurisdictions requiring opt-in consent (e.g., EU/EEA), we provide a Cookie consent management tool for non-essential Cookies.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including SSL/TLS encryption for sensitive transmissions and strict access controls. While we strive for absolute security, no method of transmission over the Internet is 100% secure. You are responsible for maintaining the confidentiality of your account password.

8. Data Retention

We retain your information only as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements (e.g., retaining order data for tax compliance).

9. Your Rights and Choices

Depending on your jurisdiction (e.g., GDPR, CCPA/CPRA, PDPA), you may have the right to:

• Access, correct, or delete your personal information.
• Restrict or object to certain processing activities.
• Data Portability (receiving your data in a structured format).
• Withdraw Consent at any time.
• Lodge a complaint with a data protection authority. To exercise these rights, please contact us at dpo@imkey.im.

10. International Data Transfers

Your information may be transferred to and processed in countries outside of your residence (including via Shopify's global infrastructure). We ensure adequate safeguards are in place, such as Standard Contractual Clauses (SCCs) or other legal mechanisms recognized by applicable law.

11. Children's Privacy

The Store is not intended for individuals under the age of 16. We do not knowingly collect data from children.

12. Important Note Regarding imKey Hardware Wallets

This Privacy Policy covers data collected via the imKey Official Store. It does not apply to data stored locally on your imKey hardware wallet device (such as private keys, recovery phrases, PINs, or crypto-asset data). imKey is designed as a non-custodial solution; the company cannot access your device-side sensitive data. You retain sole responsibility for securing your device and recovery phrases.

13. Changes to This Policy

We may update this Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Significant changes may be notified via email or a prominent notice on the Website.

14. Contact Us

For any questions or concerns regarding this Privacy Policy, please contact us:

• Email: support@imkey.im
• Data Protection Officer: dpo@imkey.im
• Registered Address: 201 Henderson Road, #09-06, Apex @ Henderson, Singapore 159545

Important Notice:imKey sells physical security hardware products only and does not provide any virtual asset trading, custody, or funds-related services. References to third-party wallets, exchanges, or decentralized applications are for compatibility purposes only; related functions and services are provided independently by third parties.